Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/ca4ba4b6-434b-3936-bc29-e61909de11a1.roa
File: ca4ba4b6-434b-3936-bc29-e61909de11a1.roa (raw, json)
Hash identifier: WXBZ2GYNWLr+I88giVHEdGb+5TpIFcuexHkEPl4B5TI=
Subject key identifier: FC:01:1F:21:12:32:52:D0:DC:27:31:2C:19:FC:CA:06:5D:A3:55:A3
Certificate issuer: /CN=cb3ad003-aa7b-45b4-b273-e01ca5688976
Certificate serial: 010D0C9F4328584894A5ECAC2EC0986100935F80
Authority key identifier: A5:7C:76:81:0C:C6:51:D7:2A:B8:6B:F7:9A:92:C5:2F:9C:9C:A4:89
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/ca4ba4b6-434b-3936-bc29-e61909de11a1.roa
Signing time: Sat 18 Jan 2025 02:00:38 +0000
ROA not before: Sat 18 Jan 2025 02:00:38 +0000
ROA not after: Fri 18 Apr 2025 01:00:38 +0000
asID: 54613
IP address blocks: 134.195.77.0/24 maxlen: 24
134.195.78.0/24 maxlen: 24
134.195.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:94:a5:ec:ac:2e:c0:98:61:00:93:5f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb3ad003-aa7b-45b4-b273-e01ca5688976
Validity
Not Before: Jan 18 02:00:38 2025 GMT
Not After : Apr 18 01:00:38 2025 GMT
Subject: CN=7a547906-d0a3-42a1-941b-8e4d6b2d2f58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:02:e5:f7:41:5e:f6:10:20:49:b1:9f:50:11:
e7:14:f7:c3:f3:ca:5b:ec:cf:69:38:49:23:f2:00:
eb:fc:06:ed:6b:74:9c:22:c2:3a:f5:7c:40:87:b1:
ac:79:19:8c:6c:a5:07:e8:ac:7d:1f:b5:f4:c1:f5:
2c:dc:ea:42:a9:d8:a5:d8:ca:b0:44:da:86:b0:78:
99:03:a9:5d:ff:6a:eb:5a:0d:33:7e:f9:7f:e6:34:
52:8c:59:dc:e8:f1:a4:21:69:28:7f:d5:ab:87:67:
7d:4c:ec:1e:6e:85:c3:a8:4e:18:2b:0a:c5:fd:de:
13:57:02:64:9c:7d:29:e8:06:4c:ff:35:5c:24:ce:
b5:78:84:ac:f7:b4:4a:9a:2b:70:e3:a2:04:ba:32:
f9:6b:86:b6:00:f0:cd:ae:cb:24:ea:51:05:61:ca:
f2:b4:e6:36:ca:38:a6:5a:b3:1b:56:c5:88:f0:a6:
c3:fa:29:1a:bf:9a:cd:ee:ff:34:08:da:85:2d:7e:
c3:6f:a7:40:53:56:b1:81:58:62:4b:63:79:19:1d:
3e:19:57:fb:5c:2b:21:33:13:00:9c:81:84:1e:3d:
d7:4d:0f:98:79:4d:58:6c:1d:80:bf:c5:45:20:a7:
c5:f2:81:77:b2:1d:a9:75:6e:c2:0e:03:71:a9:7c:
93:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:01:1F:21:12:32:52:D0:DC:27:31:2C:19:FC:CA:06:5D:A3:55:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/ca4ba4b6-434b-3936-bc29-e61909de11a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.crl
X509v3 Authority Key Identifier:
keyid:A5:7C:76:81:0C:C6:51:D7:2A:B8:6B:F7:9A:92:C5:2F:9C:9C:A4:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer
sbgp-ipAddrBlock: critical
IPv4:
134.195.77.0-134.195.79.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:a1:1f:5e:fe:3a:a1:67:4d:fa:f7:32:8b:19:96:55:55:60:
20:9d:fc:fc:dd:78:62:fa:39:02:83:49:a8:47:9e:6b:03:72:
7e:d2:05:4b:89:8a:a0:ef:b8:38:56:2b:54:ef:17:ac:52:41:
37:50:bc:61:6f:18:05:1b:5d:0b:b5:2f:e8:05:8a:98:05:53:
76:7f:5a:e0:cf:bb:12:c6:56:d8:8d:f3:9f:d5:83:31:01:9a:
99:7f:e4:b8:1b:9f:a9:cc:48:26:3c:01:80:e6:73:85:21:3a:
e6:ce:48:b8:ef:97:21:df:5d:00:92:39:72:bb:7a:1b:a2:06:
b5:ad:5c:5d:db:34:8e:c1:e7:f6:a9:aa:10:1d:f4:13:64:f5:
6b:ed:e9:2a:fd:2a:c5:61:3b:2b:c6:28:cf:26:40:56:98:ab:
5d:d4:f0:b0:a1:2d:e3:3b:c4:b6:df:2e:56:dc:b9:13:1d:47:
e8:50:3c:dc:c2:04:34:81:9d:5f:0e:a8:62:f9:c8:34:28:31:
4c:01:8e:78:cf:cf:88:aa:2d:45:fb:05:2f:a3:79:3a:91:03:
e7:3e:65:25:a9:b3:74:d9:26:ad:29:af:ba:fc:d3:78:b4:b1:
70:7c:9f:02:46:00:6c:9b:67:c1:bf:c0:e8:99:76:c8:53:3f:
d1:9f:ca:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:24:16 2025 by rpki-client